Redirect from IdP to CAS with a param

[Lalith Jayaweera]

Yes within CAS it is all about login-flow.xml but the issue is, when IdP
redirect to CAS, it will remove pass only the entityID and we cannot have a
varying entityIDs as here the variable is the username.

Basically, when the initial request comes to IdP from SP, if any queryparam
contains with the username,can we pass that to CAS as another param in
addition to the entityId,

I think at the moment it cuts off all those param and only redirect with
enitityId

On Mon, Sep 18, 2017 at 9:13 PM, Marvin Addison <marvin.addison at gmail.com>
wrote:

> On Mon, Sep 18, 2017 at 4:31 AM Lalith Jayaweera <ljayaweera at gmail.com>
> wrote:
>
>> https://ourCASHOST/cas/login?service=https%3A%2F%
>> 2Fouridphost%2Fidp%2FAuthn%2FExtCas%3Fconversation%
>> 3De1s1&entityId=urn%3Auat%3xxx%3Amsssne
>> <https://loginuat.vu.edu.au/cas/login?service=https%3A%2F%2Fidpuatweb1.vu.edu.au%2Fidp%2FAuthn%2FExtCas%3Fconversation%3De1s1&entityId=urn%3Auat%253xxx%3Amsssne>
>>
>>
>>
>> Is it possible to inject another param to above within IdP e.g. username
>> which gets from the SP link?
>>
>
> That should be possible by customizing the CAS login flow, login-flow.xml,
> as you seem to realize. It's not clear to me how you could possibly have a
> mapping from SP entityID to username, but I suppose you know how to solve
> that problem.
>
> M
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170919/bdc60e4b/attachment.html>